UCSF IT Technology

Google updated Chrome channels to 114.0.5735.198 for Mac and Linux and 114.0.5735.198/199 for Windows to address vulnerabilities in Chrome. For a complete description of the vulnerabilities and affected systems go to Chrome Stable Channel Update. IT Security  Read more about IT Security service offerings.

Mandiant reported two vulnerabilities in Golang Go. An attacker could exploit this vulnerability to execute arbitrary code.

Juniper Networks has released security updates to address a vulnerability affecting Juniper Networks Junos OS and Junos OS Evolved. An attacker could exploit some of these vulnerabilities to cause a Denial of Service (DoS).

Fortinet has released security updates to address a Critical vulnerability in Fortinet FortiNAC. An attacker could exploit this vulnerability to perform remote code execution. For a complete description of the vulnerabilities and affected systems go to FortiNAC - java untrusted object deserialization RCE. IT Security 

Cisco updated its security advisory for a vulnerability in multiple Cisco products. A remote attacker could exploit this vulnerability to elevate privileges.

VMware has released security updates to address vulnerabilities affecting multiple VMware products. A malicious actor with network access to vCenter Server may exploit this issue to execute arbitrary code on the underlying operating system that hosts vCenter Server. For a complete description of the vulnerabilities and affected systems go to VMware Security Advisories. IT Security 

Apple has released security updates to address vulnerabilities in multiple products.  A remote attacker could exploit this vulnerability to take control of an affected device. For a complete description of the vulnerabilities and affected systems go to Apple Security Updates. IT Security  Read more about IT Security service offerings.

The Internet Systems Consortium (ISC) has released security updates to address vulnerabilities affecting ISC Berkeley Internet Name Domain (BIND). A remote attacker could exploit these vulnerabilities to potentially cause denial-of-service conditions. For a complete description of the vulnerabilities and affected systems go to BIND 9 Security Vulnerability Matrix. IT Security 

Netgate released a security update to address a vulnerability in Netgate pfBlockerNG. A remote attacker could exploit this vulnerability to execute arbitrary OS commands. For a complete description of the vulnerabilities and affected systems go to CVE-2022-31814 Detail. IT Security  Read more about IT Security service offerings.